YouTube Video
https://media.ccc.de/v/matrix-conference-2026-100495-digital-sovereignty-is-no-longer-a-buzzword-it-s-procurement-policy
Just days before this conference, the European Commission adopted the **European Technological Sovereignty Package**, placing open source explicitly at the centre of Europe's digital strategy for the first time. The timing is not coincidental. It is the political response to a structural dependency Europe can no longer afford to ignore: critical infrastructure — including healthcare — running on platforms controlled by others.
This talk makes a practical argument: digital sovereignty has moved from political rhetoric to **procurement reality**. Across Europe, more than 20 governments have already chosen Matrix as their foundation for sovereign, vendor-agnostic communication — from Germany's Bundeswehr and BundesMessenger to France's Tchap and LaSuite, Sweden's SAFOS Chatt, and the European Commission itself. This is no longer a pilot phase. It is production infrastructure.
Healthcare is where the argument becomes hardest — and most compelling. Germany's **TI-Messenger**, mandated by gematik and built on the Matrix open standard, connects over 150,000 healthcare organizations and reached 74 million statutory insured citizens in July 2025, making it the largest Matrix deployment worldwide. Yet real-world adoption reveals a tension that no technical standard alone can resolve: clinical staff default to WhatsApp not out of ignorance, but because it works and patients are already there. Studies show 82% of healthcare organizations carry significant shadow IT exposure, and the NHS has internally described WhatsApp use as a *"privacy and clinical safety timebomb"*. The problem is not the technology. It is incentives and governance.
Drawing on experience as a healthcare IT vendor building on the Matrix protocol, this talk examines **three dimensions of sovereignty** — data, infrastructure, and protocol — and shows how Matrix uniquely addresses all three simultaneously, in contrast to WhatsApp, Signal, and Microsoft Teams. It traces lessons from government deployments to their implications for regulated healthcare, and covers the regulatory drivers now turning sovereignty from aspiration into obligation: NIS2 designates healthcare as an "essential entity" subject to proactive audits and fines up to €10 million; the EHDS mandates structured interoperability; and the EU Technological Sovereignty Package is beginning to shape procurement criteria directly.
The talk closes with a challenge to the Matrix community: the TI-Messenger specification is a blueprint, not a ceiling. Building shared certification frameworks for healthcare across Europe — and treating interoperability between Matrix vendors as a competitive strength rather than a threat — is the next step. The window, opened by this week's EU package, will not stay open indefinitely.
**Attendees will leave with:** a clear framework for positioning Matrix in regulated procurement; an honest account of where adoption stalls and why; and a concrete call to action for the Matrix ecosystem in European healthcare.
The presentation argues that digital sovereignty in healthcare IT has shifted from an abstract ideal to a concrete procurement requirement, using the Matrix protocol as the case study for sovereign communication. It builds the case in three acts:
1. The problem — clinical staff still default to WhatsApp despite sovereignty rhetoric; sovereignty means independence, not isolation.
2. The evidence maps the three layers / four platforms of the sovereign-communication landscape, shows 20+ European governments have already mandated it, identifies the four drivers (regulatory, security, cost, geopolitical) turning it into an obligation, and shows what sovereignty requirements look like inside an actual tender.
3. The complication and the ask — reach still lag adoption, an August 2026 inflection point in uptake, reasons adoption remains slow, the risk that no single vendor controls the standard, and closes with four concrete asks for stakeholders before the policy window closes.
Jens-Uwe Thieme
https://cfp.2026.matrix.org/matrix-conference-2026/talk/MFBXVD/
#matrixconf2026 #DigitalSovereignty
Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/
Just days before this conference, the European Commission adopted the **European Technological Sovereignty Package**, placing open source explicitly at the centre of Europe's digital strategy for the first time. The timing is not coincidental. It is the political response to a structural dependency Europe can no longer afford to ignore: critical infrastructure — including healthcare — running on platforms controlled by others.
This talk makes a practical argument: digital sovereignty has moved from political rhetoric to **procurement reality**. Across Europe, more than 20 governments have already chosen Matrix as their foundation for sovereign, vendor-agnostic communication — from Germany's Bundeswehr and BundesMessenger to France's Tchap and LaSuite, Sweden's SAFOS Chatt, and the European Commission itself. This is no longer a pilot phase. It is production infrastructure.
Healthcare is where the argument becomes hardest — and most compelling. Germany's **TI-Messenger**, mandated by gematik and built on the Matrix open standard, connects over 150,000 healthcare organizations and reached 74 million statutory insured citizens in July 2025, making it the largest Matrix deployment worldwide. Yet real-world adoption reveals a tension that no technical standard alone can resolve: clinical staff default to WhatsApp not out of ignorance, but because it works and patients are already there. Studies show 82% of healthcare organizations carry significant shadow IT exposure, and the NHS has internally described WhatsApp use as a *"privacy and clinical safety timebomb"*. The problem is not the technology. It is incentives and governance.
Drawing on experience as a healthcare IT vendor building on the Matrix protocol, this talk examines **three dimensions of sovereignty** — data, infrastructure, and protocol — and shows how Matrix uniquely addresses all three simultaneously, in contrast to WhatsApp, Signal, and Microsoft Teams. It traces lessons from government deployments to their implications for regulated healthcare, and covers the regulatory drivers now turning sovereignty from aspiration into obligation: NIS2 designates healthcare as an "essential entity" subject to proactive audits and fines up to €10 million; the EHDS mandates structured interoperability; and the EU Technological Sovereignty Package is beginning to shape procurement criteria directly.
The talk closes with a challenge to the Matrix community: the TI-Messenger specification is a blueprint, not a ceiling. Building shared certification frameworks for healthcare across Europe — and treating interoperability between Matrix vendors as a competitive strength rather than a threat — is the next step. The window, opened by this week's EU package, will not stay open indefinitely.
**Attendees will leave with:** a clear framework for positioning Matrix in regulated procurement; an honest account of where adoption stalls and why; and a concrete call to action for the Matrix ecosystem in European healthcare.
The presentation argues that digital sovereignty in healthcare IT has shifted from an abstract ideal to a concrete procurement requirement, using the Matrix protocol as the case study for sovereign communication. It builds the case in three acts:
1. The problem — clinical staff still default to WhatsApp despite sovereignty rhetoric; sovereignty means independence, not isolation.
2. The evidence maps the three layers / four platforms of the sovereign-communication landscape, shows 20+ European governments have already mandated it, identifies the four drivers (regulatory, security, cost, geopolitical) turning it into an obligation, and shows what sovereignty requirements look like inside an actual tender.
3. The complication and the ask — reach still lag adoption, an August 2026 inflection point in uptake, reasons adoption remains slow, the risk that no single vendor controls the standard, and closes with four concrete asks for stakeholders before the policy window closes.
Jens-Uwe Thieme
https://cfp.2026.matrix.org/matrix-conference-2026/talk/MFBXVD/
#matrixconf2026 #DigitalSovereignty
Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/